11.1: Establish and Maintain a Data Recovery Process
PF v1.0 References:
Control is new to this version of the control set.
Control Statement
Establish and maintain a data recovery process. In the process, address the scope of data recovery activities, recovery prioritization, and the security of backup data. Review and update documentation annually, or when significant enterprise changes occur that could impact this Safeguard.
[csf.tools Note: For more information on the Critical Security Controls, visit the Center for Internet Security.]